NSE7_EFW-6.2 Free Questions and Answers – Fortinet NSE 7 – Enterprise Firewall 6.2 – PassQuestion Free Questions To Test Online

1. Which two configuration settings change the behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

IPS failopen

mem failopen

AV failopen

UTM failopen

2. Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

Anti-replay is enabled.

DPD is disabled.

Remote gateway IP is 10.200.4.1.

Quick mode selectors are disabled.

3. Refer to the exhibit, which contains the output of a diagnose command.

Which two statements regarding the output in the exhibit are true? (Choose two.)

FortiGate will probe 121.111.236.179every fifteen minutes for a response.

Servers with a negative TZ value are experiencing a service outage.

Servers with the D flag are considered to be down.

FortiGate used 209.222.147.36as the initial server to validate its contract.

4. Which two statements about application layer test commands are true? (Choose two.)

They are used to filter real-time debugs.

They display real-time application debugs.

Some of them can be used to restart an application.

Some of them display statistics and configuration information about a feature or process.

5. Which three conditions are required for two FortiGate devices to form an OSP adjacency? (Choose three.)

OSPF costs match

OSPF peer IDs match

Hello and dead intervals match

OSPF IP MTUs match

IP addresses are in the same subnet

6. Which two statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

When executed on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate.

When executed on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate.

When executed on the All FortiGate in ADOM, changes are automatically installed without creating a new revision history.

When executed on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.

7. Refer to the exhibit, which contains a partial output of an IKE real-time debug.

Based on the debug output, which phase-1 setting is enabled in the configuration of this VPN?

auto-discovery-receiver

auto-discovery-forwarder

auto-discovery-sender

auto-discovery-shortcut

8. What is the diagnose test application ipsmonitor99 command used for?

To enable IPS bypass mode

To provide information regarding IPS sessions

To disable the IPS engine

To restart all IPS engines and monitors

9. Refer to the exhibit, which contains a session table entry.

Which statement about FortiGate inspection of this session is true?

FortiGate applied proxy-based inspection.

FortiGate applied flow-based NGFW policy-based inspection.

FortiGate applied flow-based inspection.

FortiGate forwarded this session without any inspection.

10. Refer to the exhibit, which contains the output of a debug command.

Which two statements about the exhibit are true? (Choose two.)

The local FortiGate OSPF router ID is 0.0.0.4.

The local FortiGate is the backup designated router.

In the network connected to port4, two OSPF routers are down.

Port4is connected to the OSPF backbone area.

NSE7_EFW-6.2 Free Questions and Answers – Fortinet NSE 7 – Enterprise Firewall 6.2

View Online NSE7_EFW-6.2 Free Questions and Answers – Fortinet NSE 7 – Enterprise Firewall 6.2

Leave a Reply Cancel reply